IR-9: Information Spillage Response

Statement

• Respond to information spills by:

  • a.

    Assigning personnel or roles with responsibility for responding to information spills;

  • b.

    Identifying the specific information involved in the system contamination;

  • c.

    Alerting personnel or roles of the information spill using a method of communication not associated with the spill;

  • d.

    Isolating the contaminated system or system component;

  • e.

    Eradicating the information from the contaminated system or component;

  • f.

    Identifying other systems or system components that may have been subsequently contaminated; and

  • g.

    Performing the following additional actions: actions .